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AMENDMENTS TO THE CLAIMS 



Please amend the claims as follows. 

1 . (Currently Amended) A network system for key management, comprising: 
a server; 

a key management system providing process logic for key management system 

initialization located on the server; 
a key management system storage providing a secure data storage for the key 

management system; and 
an interface providing a means for inputting data into the key management system^ 

wherein data is used to generate a key in the key management system . 

2. (Original) The network system of claim 1, further comprising a client computer 
operatively connected to the server, wherein the client computer comprises a user 
interface to input data into the key management system. 

3. (Original) The network system of claim 1, wherein the key management storage is 
located on the server. 

4. (Original) The network system of claim 1, wherein the key management storage is 
located on a second server operatively connected to the server. 

5. (Original) The network system of claim 1, wherein the interface comprises a graphical 
user interface. 

6. (Original) The network system of claim 5, wherein the graphical user interface is 
integrated into a web browser. 

7. (Original) The network system of claim 2, wherein the user interface comprises a 
graphical user interface. 

8. (Original) The network system of claim 7, wherein the graphical user interface is 
integrated into a web browser. 
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9. (Original) The network system of claim 2, wherein the client computer and the server are 
connected using an encrypted connection. 

10. (Original) The network system of claim 1, wherein the key management system further 
comprises: 

a memory storing data within the key management system; 
a hashing module hashing a key encryption key; 
an encryption module encrypting data; and 

a serialization module serializing data obtained from the memory, the encryption module, 
and the serialization module. 

11. (Original) The key management system of claim 10, further comprising: 
a randomizer randomizing data. 

12. (Original) The key management system of claim 10, further comprising: 
an encoding module for encoding data. 

13. (Original) The key management system of claim 10, wherein the hashing module uses a 
MDS hashing function. 

14. (Original) The key management system of claim 10, wherein the encryption module, 
further comprises a key generation tool. 

15. (Original) The key management system of claim 14, wherein the key generation tool 
comprises a synunetric algorithm. 

16. (Original) The key management system of claim 14, wherein the key generation tool 
comprises an asymmetric algorithm. 

1 7. (Currently Amended) A network system for key management, comprising: 
a server; 

a key management system providing process logic for key management system 

initialization located on the server; 
a key management system storage providing a secure data storage for the key 

management system; 

an interface providing a means for inputting data into the key management system; and 
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a client computer operatively connected to the server, wherein the client computer 

comprises a user interface to input data into the key management system^ 
wherein data is used to generate a key in the key management system . 

1 8. (Currently Amended) A method for initializing a key management system comprising: 
entering data into a key management system interfac e, wherein data is used to generate a 

key in the key management system : 
entering a key encryption key into the key management system interface; 
combining data into a tuple; 

encrypting the tuple with the key encryption key to produce a secret token; 

storing the secret token in a vector; 

hashing the key encryption key; 

storing a hashed key encryption key in the vector; 

storing a list of keys in the vector; 

serializing the vector to produce a serialized file; and 

storing the serialized file in a key management system storage. 

1 9. (Original) The method of claim 1 8, further comprising: 
encoding a key field of the tuple. 

20. (Original) The method of claim 19, further comprising: 
randomizing the order of the list of encoded keys. 

21. (Cancelled) 

22. (Original) The method of claim 1 8, further comprising: 
randomizing the order of the list of keys. 

23. (Original) The method of claim 18, further comprising: 
generating data to encrypt; 

24. (Original) The method of claim 1 8, wherein the tuple comprises: 
a key field; 

a value field; and 
a type field. 
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25. (Original) The method of claim 18, wherein the tuple comprises: 
an application name field; 

a key field; 

a value field; and 

a type field. 

26. (Original) The method of claim 1 8, wherein the vector comprises: 
a secret token portion; 

a key encryption key hash portion; and 
a key list portion. 

27. (Original) The method of claim 26, fiirther comprising; 
tagging the secret token with an application name. 

28. (Original) The method of claim 26, fiirther comprising: 
tagging the key in the key list with an application name. 

29. (Original) The method of claim 18, wherein the key management storage is located on a 
second server. 

30. (Original) The method of claim 18, wherein the key management system interface 
comprises a graphical user interface. 

31. (Original) The method of claim 30, wherein the graphical user interface is integrated into 
a web browser. 

32. (Original) The method of claim 18, wherein the encrypting comprises using a symmetric 
algorithm. 

33. (Original) The method of claim 18, wherein the encrypting comprises using an 
asymmetric algorithm. 

34. (Currently Amended) A method for initializing a key management system comprising: 
entering data into a key management system interface , wherein data is used to generate a 

key in the kev management system : 
entering a key encryption key into the key management system interface; 



87504 



5 



. Application No.: 10/037,153 



Doclcet No.: 09469/010001 



combining data into a tuple; 

encrypting the tuple with the key encryption key to produce a secret token; 

storing the secret token in a vector; 

hashing the key encryption key; 

storing a hashed key encryption key in the vector; 

storing a list of keys in the vector; 

serializing the vector to produce a serialized file; 

storing the serialized file in a key management system storage; 

encoding a key field of the tuple; 

randomizing the order of the list of keys; and 

randomizing the ord e r of the secr e t tok e ns in tho vootor; and 

generating data to encrypt. 

35. (Currently Amended) An apparatus for initializing a key management system comprising: 
means for entering data into a key management system interfac e, wherein data is used to 

generate a key in the key management system : 
means for entering a key encryption key into the key management system interface; 
means for combining data into a tuple; 

means for encrypting the tuple with the key encryption key to produce a secret token; 

means for storing the secret token in a vector; 

means for hashing the key encryption key; 

means for storing a hashed key encryption key in the vector; 

means for storing a list of keys in the vector; 

means for serializing the vector to produce a serialized file; 

means for storing the serialized file in a key management system storage; 

means for encoding a key field of the tuple; 

means for randomizing the order of tfie list of keys; and 

m e ans for randomizing tho order of tho soorot tokens in tho vootor; and 

means for generating data to encrypt. 
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